dead:beef::

[Jeroen Massar]

On 2011-02-16 14:41, Jima wrote:
> On 02/15/2011 08:52 PM, Brian E Carpenter wrote:
>> Has anybody here seen garbage IPv6 packets whose source address is
>> like dead:beef::, where the 32 bits are a reasonable IPv4 address?
>>
>> That is to say, it's like an IPv4-mapped address but with the
>> bits at the wrong end, followed by 96 zeros.
>>
>> We seem to get some of those arriving here, with valid IPv6
>> destination addresses.
> 
>  Like Ignatios, I've encountered packets with a *destination* address
> like you describe, but not source.  In my case, I generated them in one
> of my less-good iterations of trying to port Nagios' check_nrpe to IPv6.
>  (I ended up scrapping my effort and using Bernhard Schmidt's patch,
> which worked as expected.)
>  I too would be interested in learning of the protocol/etc.  My
> off-the-cuff guess would be a poor implementation of specified source
> address in some app with not-very-mature v6 support.

The worse part of course is that the packet is able to arrive in New
Zealand, which either means that it is generated quite close by there or
that a lot of folks simply do not care about RPF checks....

Maybe folks should be reminded that BCP38 also applies to IPv6....

Greets,
 Jeroen